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(57) inui 

[BUS] $ «b lc£±t£<7^ Nflf-^iim ^7,7- A Srl&ffc 




itnxmi] w-xzm^iti-x^xzn. 
fv&miM&mt&i&m-j-ziakmmm* &Tfmm*x 

m^w-XRV'ntimmimmm^mmu^Mi.x, & 

iffifafS 1 ttftHim <h P?l-<DfB 2 fr«pnflM«r4j«i-«* 2 

msm^m^mnRx^m 2 ^DisatcHUsa^r^m wis? 

2 ] mTfefg 1 tt^&AxmGM 2 

LfcHutam 1 f+ADffir$B£8l 2 tt*Dtf $8 * -r 5 ^ t 
flfitBSB2±fiS3MS:tt, BulE^^MS^^^ff £ 

Lfc^*Di9«s:fg 2 ttfflt $&<t r 5 c t t -r 

*ifttiP««c. tyH»t*tt, *£&tif«&£fifc 

u 



£H$2 0 0 2 — 2 5 2 6 1 1 

mimatttmz* wim&mfu&i&\.x. m^m^± 

[SS*3S l 0 ] ms^mfmmStU, milEIS 1 ttflDti? 

aics<5v%r, WffiWAotry hff^eiftL-c, ^ 
isasfcs i i ] wf&n&mttm'Xs ifitzm 1 mm 

««S:a!50IIUT, m^X*±$rtrZ>^k*$mk1ri> 

m*m 1 2 ] HuiEi^t mm*, w-x&mwk urpt 

ml tem 1 £fiJ»J£li, m 1 f+»D W« il^6i3 i« 



(3) 



4#BH2 0 0 2 — 2 5 2 6 1 1 



M£££>&U mifsmilimMi:Htj|5^2^iti:^- 
U 

fftS£i£{&3£Htt, mjIS^lcftx.T, ^^n/cHuiasu 
2H£cflti:flk HulEm2^(ii:Htji5^l^fi^^- 

m 1 mBmn&&&r&n 1 y?t , 



mm 1 mm® t m-<om 2 ^wi^Mts^ 2 
iHufe^i^fii^f-ra^t^M, &Tfme&*ir 

2BBM^ mjlE^2^Mtitjfami^Mi:^- 
g l l«i?rMt5i 1 £/&*1r y^t s 

^m^Tyzfn, 

mum 1 mmnt m-<r>m 2 matttn&&&ir&ws 2 

m^xzn. msmtt\ztm-*famm*:i&\*xm 
?7j**tm.\,x^z^>\?*-*m^v^ifet£%m. 



m i mmm*£j&-rz>m 1 * ^ . 
mum i mD«ia <t pi-<om 2 f+*qtim&±rit-t-ss& 2 

[|&^ 1 8 ] spgtfcBMrfc It^m itufS^ 

t mtzrn 1 m&m t z mn-r * mnmmx & o x % 
m 1 wmn&&j&rzm 1 
ift&¥-x&m^mimmm^mmn*Mi,x, & 

mms&mmim^T^v xj»&m\.xvm-x%±j& 

tmsmimsMttrStmu wtfm^x^m^xm 
firx&m. m&&^xizmz-xfa&M®iZM^xm2 

z&mmmxtbox. 

mtzm 1 ttmmtm-<om 2 mmmz±&'rz>m 2 
^r/uzfv xj*&mi*x&tt^m&£&rrz®tt 

****** -ra»M». 

[000 1) 



^2 0 0 2 — 2 5 2 6 1 1 

[0002] 

[0 0 0 3] m^tt<D*p\Zte. JEMcOP^-^i^V^ 

om-^i^v-T^L^Hufs^^ic^r/v^y x 
m&m^xm^i,xt>, n^wxi^sii:^ 

WHRflj £SB£U *s±US^rfi6ttdSfc* 

[0004] ±!Bta-f§« >9 *S3S£ U^SPt^^-0JJ 
tl^X. NTRUBtfM^fc5 0 NTRU^M 

[0 0 0 5] NTRUPt^^tClO^-m. Jeff 

rey Hoff stein, Jill Pipher, andjoseph H. Silverrna 
n, "NTRU: A ring based public key cryptosyst'em" , L 
ecture Notes in Computer Science, 1423, pp. 267-28 
8, Springer-Verlag, 1998. (Cg¥ U < i#-<«b*LTV N 

xk&tj:z>fimmi&z><DX\ Mmisttmzmmizte 
[0006] m&mi) i.&.nmm&m&'rztLft 

ii, n^coai&r, % r 2 , • ■ r„ 

. , r» , • • r„ 

TOmirSf^fkL. n^cOBf^c, , c 2 , 
• • • , c n ^:^c^"5 0 
[0 0 0 7] 

c i — E (m, Kp, r i ) 
c 2 = E (m, Kp, r 2 ) 

c n — E (m, Kp, r n ) 

w^T, C = E (M. K, R) li, Bt-^g|K$rfflV^T, 
[0 0 0 8] Pf«gEJ4, ^UfcBf^c 



(5) 



M2 0 0 2 — 2 5 2 6 1 1 



-^3tc. , C2 , • c»£g{fU ^i&IEtft 

LTi^6«#«K s Srffl^T, gff UfcBf^c . % 
c 2 . • • - x c „ ^#^tm' i , m' 

2 , • • • x m' n £:tff6 0 

[0 0 0 9] 
m' i =D (c i , Ks) 
m' 2 = D ( c 2 , Ks) 

m' „ =D (c » > K s ) 

m^mm*. ±&<o£?izi,x&btiitGitt 

rn'i ,m' 2 „ •••^m'n o*Ct>^«£ 
oTV^c <b^^ 5 ri*$g£ l^tct *fc-To 
[0 0 10] r. <^&£-§-iiff y^7A(cJ:6t, m^SSO 

c i = E (m„ Kp, r i ) 
c 2 = E (nu Kp, r 2 ) 

c n — E (nu Kp, r n ) 

Wni«^P>ftra^r [ 1 ] , r [2] , 

• • r [n] izmi-zffim&mE-^mftz&titf 

ltiple Transmission Attackilll' ? Q 

[ooii] iwwna** &*m»<D&£.i,nz*&tt 

SW)lo-C&5NTRUIitf*^^T, ±12^^ 

-OJfcJg&tCO^TIi, Jeffrey Hoffstein, Jill Piph 
er, and Joseph H. Silverman, "NTRU* A ring based p 
ublic key cryptosystem" .Lecture Notes in Computer 
Science, 1423, pp. 267-288, Springer-Verlag, 1998. IC 

loo 1 2] a±^ufc«tpjc, -&%km i tcio^r 

tt£*0iJ2) $fc, «PM2 0 0 0 — 2 1 6 7 7 3 

[0 0 13] W«<0»m(B9-CW:, i^/Nr>aIM 

ISfflT-tiu ms&ttt. flreSl©^ 

ftU. tfreB*«t£ffi^LTt&^:£&^U fffllESl 



«*»WU ^ff UfcHulE^lco^^^^fifir^tBLfc 

M^^ia^2(D/N^^^fit<t^-iH-6^i^ msa« 

[0 0 14) 

i^^Bt-^im^^xA. mmmms &mmm.. tire-am 

[0 0 15] 

ttzm. m&mttizmz-xfa&m&&m^xm2 

tire¥*&tftirei& H«il: ^ri£«m*iSUT, *£ 

KrtF*x*3t«-r saw^ik t . mitE^ 1 mnww t m 

[0016] mtzm i ±^#l5^t/Huis^ 2 £ 

Rxfm2ttmmn&±!&^z£?\zffi!&^xh£^\ r 

sriiHfu, #res2^BK^sw:. aires i f+»Dwa*s 
«u s« ufcBiiEtBiwi9a*i2f«atts 

[0 0 17] C^T% Hufsmi^^i^ ^3cL/cRfi 

IBS i mDW«icBt-§-r/u=^y x^srifiuT, «p^kf+ 

*DW««r^fi£U-C5HmU. titES2^fiJ£^&tt. ^iBaPf 

*§ttmm«**m ^ft ufcBt«kmn««ictinE 



(6) 



^2 0 0 2 — 2 5 2 6 1 1 



[ooi8] - -x\ gniE^i^K#sii, 
u^iEJSittMffat-, )>^£*Slt, se^Hta 

[0019] mepri£fMi^is:». miwx& 

^Hul5^2mDfW^tc, ^ftfeWSftafn^JfiLT. tff# 
^Mt5«tpi«ut)J;v\ ::t\ itfjfEplig 
SlJS^Stt, ^le^tmJlE^iftM^irt^D^SrJS 

[00 20] * r T\ lffifE«nSSW4«li:. Htj|5¥^r>S: 

[0021] r awa?ria!«ji^att, ruieis i 

&'tz>±?\mtfiLi,xi>&\,\ 
[0022] ::t, Wifr&inmmz. WfeiHHki 

T^^feSLT^f U flfrtESft^fitt, mJfE&£# 

U *0>ttlC?f& HMfEi^f^ii. Rtj|5¥^<tf^-<7) 

mttz±&-tz>m&\z}o\,^x, m&&i 



£oicffirfti,xt>&\<\ 

[0023] ::-e, fiWa52Hf»®tt, iUSE^xicfti 

£o\ZffifSLLXi>£*<\ 

[0 0 2 4] w^-C, tfTfEi£{#£Egl±, mlfS^T 

mm&t&tez%m^m&&%f(im¥.$:izM^x, %w 
m&tfm*&$.u ffi&minmm*. m&&jci£itx. 

^u-CBufs^iBi^fii^^L, flfrsEsm^ett, $ 

*lS](4BSIiSS:JfeL-CfitriE^2KI«:fia«r^S;L, flufEf&l 

£?lc:flt/&UT<t».J:t\ 
[0 0 2 5] 

[«^(Z)|IJSO^] 1. Bt^iimv-^^A 1 

^ i [ci^xwn-rzo 

1. 1 Bt-^Tlff '^fA lCOtf$/£ 

[00 2 6] S^iifl^^v- ^ 1 li, ta-wai9* s «^u 

tfffi-JHiO^^ifelCoV^Ttt, Jeffrey Hoff stein, J 
ill Pipher, and Joseph H. Silverman, "NTRU: A ring 
based public key cryptosystem" , Lecture Notes inC 
oraputer Science, 1423, pp. 267-288, Springer-Ver lag, 

1998. \z.m\^<m^hixx^^ 0 

[0 0 2 7] i^f^©10ti, ^«>fEtfi£L-Cl^6¥XlC 
N T R UPt^^lC J: 6Bf fkTfr* V LTBf-^ 

(CNT R UBf #^(C «t U XA^SS LTI 

1. 2 i£ff£fll 0« 

^ff^©i of*, spytistis&i o i , 

0 2 % li?if« 10 3, — ^rrSlttB8»SB 104, Bf-^ 
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ion Mtm\a*. wwjicii w^o^o-fey 

ROM, RAM, ^-Kf-i'^^^y K 7^ * 
y^^yh, *— a!?— -^*X iifSSP^^b 
M$M3yt^-^^f^tfc6 0 HUiER AMX 

huIe^ > tr*-* x o ^7 MC'&oX®fti- 5 ^ £ (c x 

[oo28] ( i ) w-smsM i o 1 

TOrSMtSP 1 0 1 11 ^¥*m£f5i&LT^5 0 
mil ®j£S^fflfto»kffififc$i'ba. 

(2) fmm&&ami o 2 

fcfrWlD««R a $rtiJf«f#jna5 1 0 3 -tfUrT*., 

[0 0 2 9] (3) »Wl 0 3 
Wi«l 0 311 sfcXIEtMSl 0 lfrWXm&m 

u tttoffim£j$M i o 2 A>p,mDMR a *&v) 

iRa^t'y h^LfcH$*TfcS^^«F (m, R 
a) =m | | R a ^^60 

[0030] ::~t\ mm- r I | j 11 b** h&r££ 

0»]*.H m=10, rLen = 5, Ra = 7i:t 
¥^mtOt'^ hZmm* r 1 0 1 0J , S^rL 
e nOf«R a cOfcTy h?«§H2 To 0 1 1 1 j £ 
fc505T% try M&frLfclSJRfl r 1 0 1 0 0 0 1 1 
1J <b&9, ^tlte-\-m&X*3 2 7t'fe6o 
[00 3 1] m^^P^ 1 0 3 11 Lfcfcr* 

WfRF (m, Ra) £R£ ^HfcgB 1 0 5 ^MttZ* 
(4) -#ffiH£B8&SB 1 0 4 

— *rsjttna»» 1 0 4ti ^*-*i6H4Bgffti lt^j/ 
[0 0 3 2] ~-T\ -#rfi]t£lll&<tll A^£*Lf;:M 

Wlh (m) frb¥-Xm<Dm&&Z>Z£tfmmX'*>ZJL 

MtS&IHS?, 1 9 9 7, 5 6^-^18 9- 
1 9 (Ci¥U<i$'<P>iXTl^« 

[00 3 3] -^rfiitign^^ 1 0 4 11 ¥^tta©SP 1 0 

BafthiCtSWJtt^tfeUTK^fiah (m) ££/«U £ 
j*LfcB8#<tffh (m) £&ff SB 1 0 6 



^2 0 0 2 — 2 5 2 6 1 1 

(5) BfriHfca$l 0 5 

Bf-*HfcgB 1 0 5 II &$c£/£g|5 10 5 1, Bf JHKEt&SP 

1 0 5 2RZm j %<tffi$k&l 0 5 3A*bmi8.£tlX^ 

[0034] (Jte-snaiet&gB 1 052) st-^iaig^i 

0 5 211 ^46Bf#«iKp$rlBlSUri^o 

(a«t*j«sii 1051) aft^eu 1 0 5 1 11 -mt 

LT, Cff&07^^7ygat1?feSr and ( ) £ 

[00 3 5] (Bff^kBi»SB 1 0 5 3) tBS&SB 1 

0 5 311 ^^NTRU^-§-^^9|r#r^^lJXA$: 

^tlt6o Bt^mis^i o 5 3ii vmmmi o 3 

frbm&ffimF (m, Ra) ££ttl&«9, £L|£3^cgJ5 1 

05 lfrbnj&T&giV&v^ m^mzm&i o 5 2^ 

[0 0 3 6] Pf #fbmtffll 1 0 5 311 £#®to 

g»*ftofc*S£Hff«F (m, Ra) \Zw\U^T^^ V 
XASrttLt, ^ff^fiE (F (m, Ra) , K 
p, r) ^LfcBf^bB£^«E (F 

(m, Ra) , Kp, r) £ri£ff SB 1 0 6 ^Mtt~Z>. 

(6) j&mSSl 0 6 

iUffSiS 10 611 P£-SHb£^m$ftE (F (m, Ra) , 
Kp, r) gg^ilh (m) Sltf&o 
fcSf*Ht:*£'&tit$RE (F (m, Ra) , Kp, r) 
gliScfih (m) tW^-4yh3 0^LtSfl|S 
®2 0^{f1-6o 
[0 0 3 7] 1 . 3 ^{1^© 2 0 

sftise 2 o ii, sftas 201, ts#fkSB 202, tt$a 

^2 0 3, — *|S]ttgaiScS» 2 0 4 , lt^2 0 5, 

m^-xtzmM 206 sutjtifis^miam 207 

£*X5 0 ^ff^©2 Oil J.^ICll i^Mil 0 b 
[00 3 8] ( 1 ) ^11^5 2 0 1 

g{fg&2oni mmmmi o*»w^-*y h3o 

^LT, Pffik^ftE (F (m, Ra) , Kp, 
r) tHa&filLh (m) iS:a«U SmU/cBf^k^ 
t^E (F (m, Ra) , Kp, r) ^^2 0 2 
-tti^L, ^ff L^^fiSh (m) ^it^2 0 5-tti 

[0 0 3 9] (2) tt*fb*|S2 0 2 
tt#fk«2 0 211 ^-^12^2 0 2 l&O^^fbBa 
^gP2 0 2 2^P>«^$tt-5 0 

(^■^aieis^2 021) tg-fHBsase&2 o 2 1 ii, 

[0040] mwtmm 2210) fs^rkHSkiv 2 

2 1 on, nt-^fkB8»SBi 0 5 3^-r^pf-^-T/u^!; 

5o fR#fkBBMlS2 2 1 oil gffi$2 0 1 ^^Pf^b 



(8) 



4$$J2 0 0 2 — 2 5 2 6 1 1 



&&fitUE (F (m, Ra),Kp, r) 

'&*mtzm?®2 o 2 i frh'& j *mK s zwt*m-f 0 
loo4i] &ic, m j %itm$m2 2 i on, gfc^tHL 

(F (m, Ra) , Kp, r) IChuIE^T/U^ U 
^Itt, &^££^D (E (F (m, Ra) , K 
P, r) , Ks) 5rML> £/&Lfc^S£^*gD 

(E (F kRa),Kp, r),Ks) 
gfl2 2 5 O-ffi^f-r^c 

[004 2] (3) fimi$3£Jl2 0 3 
timi&ifc^ 0 311, ^^t'^/ Slgcr Le n^rlEttUT 
^<5 0 timi&:fegfl2 0 311, m^ibSP2 0 2frh®.W& 
&tmD (E (F (m, Ra) , Kp 4 r) ) , Ks) 
Stf & o tz'&^r&^m D (E (F (m, 
Ra) , Kp, r) ) , Ks) (D^mfrbt'yh&TL 

r a tmmsixtimy ^m^m^m' t itm 

£fiKLfc»M:m' &tg*§c£fc«Sl52 0 6 

[0 0 4 3] (4) -^|6lttBS3»8B2 0 4 
— *r6H4B9»ai 2 0 4 11, —XfafflffiM 104^tl 

V^5 0 — #fatfcBS&ffli2 0 4tt, ffim&4x%H2 0 3frb 

^ffigchicxzmM&i&Lxm&mh (m' ) 

U ^LfcBEBMh (m' ) ^it^2 0 5-ti3^-r 
[0044] (5) ittta52 0 5 

it»as2 0 5tt. £fM52 o ia>e>iia&iah ( m ) «rs 

ffi^ -^WW2 0 4?J^Mh On' ) £ 
it«&gi5 2 0 5 II, Bigcfifh (m) £ H 
Mh (m' ) t^JtftUT. -HRi-675^^*JWf 

Jt&Sf52 0 5il, Hft1-5»^fctt, 
j=UU -IfcL^^lcil, JtBKfeJ&j =0*-** 

6 0 ^u/cit^m j *\tm£w$mu2 o 7 

[0 0 4 5] (6) ffi^XSElftSJ 2 0 6 
®^;£fBttSR2 0 6ll, «^:£&tEtfrrSfc»<&«££ 

(7) ft&^|Etgg&2 0 7 
Jt$fc&&iEttgB2 0 711, HM&Mk} SrSEIfrf Sfc«><D 

l. 4 ^f^i oco®Jbf^ 

i£ffi£fgl OOfiWdo^T, l4-15lC^t7P- 

[004 6] tftotfm£j£& 1 0 2 II, tftofiimR a £ 
to£U MUd«R a &ffl«f*flnasi 0 3-tH 



(^f^s ioi)„ &lc, ffiaittJmffls l o 3 
II, ¥3CfSt&SBl 0 l^b¥^m^ML Ur^ 

s i o 2) , mufim&s&i 0 2frhmmmR a & 

(t^ofcf^DffifftR a <h^lt, &&tmF (m, 
Ra) ££/&U ^Lfc*§£W«F (m, Ra) £9f 
^g|5l 0 5^m^Ji"6 (^f«^S104) o 
[004 7] Bf^bSB 1 0 5 II, £rS+i!?$gF 

(m, Ra) fcgtfl&tK Stt^ofcJ^^Hf^F (m, 
Ra) {C^r^^JJXAE^LTBf^t^^^E 
(F (m, Ra) , Kp, r) ££$tb Ufy/Sl 
0 5) , ^LfcBt4Hfc*££i*f8E (F (m, Ra) , 
Kp, r) £i£{fgfll 0 6-aj^J-T5 Ur^SlO 
6) o 

[004 8]fc -^fflttHft® 10 4 1*. SPXSEIS 
SP1 0 l^feTOmSrtt^fflb (^f^S10 7) , 

fH^fith (m) £±/&L (^T^SIOS) , £/£L 

fcMWh (m) srigfsasi o e-m^-ra c^t^x 

S 1 0 9) 0 i^ffgRl 0 611. B£-^fcJ££HfHiE (F 
(m, Ra) , Kp, r) £ , BiiMh (m) * 

*tt«^fc«HHfcl&£tir«E (F (ra, Ra) , 
Kp, r) IH&f&h (m) i:^^^7h30 
^UT§:ff^g2 0^mt~TZ> i^r-yzTS 1 1 
0) . 

[0049] i . 5 ^mmm 2 0 amy? 
h^ffl^rtJi^-t-So ^ff^2 0 in, ori> 

^y^yh3 0^LT, Bf^-fbe^ffif«E (F 
(m, Ra) , Kp, r) kM&mh (m) i^ffl 
Uf7^S 15 1), gff LfcB*#fbfr&tf«E (F 
(m, Ra) , Kp, r) «rtt«lsa 2 0 2 — -tti^J U 

^ffL/c^fith (m) ^^2 0 5-^^5 (X 

TyZfS 1 5 2) o 

[0 0 50] tg-^ftSB 20 211 ft^m&mnE (F 

(m, Ra) , Kp, r) ^r^{t^«9, SttEtofcBlH* 
{be^if«E (F (m, Ra) , Kp, r) (cm^T/U 
=fyXAD«rJ£U-Ctg-^^Hfl«D (E (F (m, R 
a) , Kp, r ) ) &±j£L (^fj/^S 153) , I 
^^fiSraD (E (F (m, Ra) , Kp, r) ) 
^*^2 0 3^mt}~rZ (^f^T'S 1 5 4) 0 
[00 5 1 ] m^*^2 0 311, «#fe^«D (E 
(F (m, Ra) , Kp, r) ) $rgttE0, S^^o 
fctt«S^««D (E (F (m, Ra) , Kp, r) ) 

2 0 4 -ffi^ L, toK Lfcffl#3tm ' «rffl#^tSE«6B 
2 0 6-M&#i£tj» Uf^7'S 1 5 6) o 
[00 5 2] -XfamS&& 2 0 4 11, mttm' 



(9) 



&ffl2 0 0 2 — 2 5 2 6 1 1 



»^LT89Mh (m' ) &£fifcU ^UZ-cgg^c 
flh (m' ) £Jt®fgfl2 0 (^r^Sl 
5 7) 0 jt^gP2 0 5li, m&mh (m) irl^&fih 
(m' ) <fc£gtfIfctK gltlXofcBaMfh (m) £BH 

fcit^^: j ^rlfc^^iatggP2 0 7lC&£i£fr 
y^S 158) 4 

[0 0 5 3] 1. 6 ^(Off^(C^tt5®)f^iiEi:^ 

"9 ?)^^ ITV ^IC^V ^T, gff§£^2 0 
(DVcSm 2 0 5 j^tH^-r 6 Jt^^ j ti^lc: 1 T'fcSo 

[0 0 5 4] m^^^^UTl^^tC. g 

ff^©2 0(Dlt^2 0 5 tf&jj-fZltm&W: j riU <t 

tezmmn. nnh. ^iii2 0(o-^{4W2o 

4(Cj;oT£ric£;ft^ch (m' ) ri\ iHfl^glOcO- 

^ttra&aji 04(cj:oT^$nfch (m) tmm 
mi,<tez>mmn. ^(dx^^^ 0 

0 4RTf-JifaVm$m2 0 4{C*S^T, kt'^hCO/N 

[0 0 5 5] ftot. ^(C^^O^^Lfcit. 

4&l>-^ftt£&l3&£i5 2 0 4T*ffiV^ibtL6^^^v/^^ 
^SHA-li:t6^, S H A — 1 lil 6 0 t'y h<D 

[oo5 6] £7t. -r>-^-^^ h 3 o^^ruTiim^ 

h I 0 4&fttl-fZ>^*y^~m<DK: 

y h&*&tttcf&XfoZ 0 -m^y^~m%t<D\tili 

x\ ^<Dmx<nmmm-£. ^x^tj^y v&(r>2\% 

[0 0 5 7] m*.\Z. ^'r>a»SHA-1^9 
NTRVf%^tt&^tff$^ttXte\fe^Xm- 

1 6 0 tTy h£l±<7)h<Dfr&t>tlZ>Z.kfr^WX\ Z 

iiffSl4> m^XVUtittt'y h&<Dm%ifeX2b^Tz<D 
X. t£3£#J 1 (D^—y-ife^it^^v- Mc)Jc^X . Z<D& 

mmmmxnmm m^tt <^y>. mm £b^fa-t-r 

[oo 58) ^teicoi^Tll. ^yv'aM 



t&WX. +fttj:$:£&tmi%XZ Z> 0 *QxT, taw 

m*muzixx^it£*ix\<^cDX\ vtmmi ic^-r 

J: 9 ^Multiple Transmission Attackd** LT X ^HJS 
[0 0 5 9] V£$:&m^J:Z>t, ¥-X&*:<r>^ 

i^ct, &imtmc¥XZ^it^x!kj&i,tz^x 

^"^li, Mul tiple Transmi ss ion 
Attack t^tiX^o 

[0060] itiWL, ^mmmm^xzt. mm 
mztttoffimRaZ&tezftmzmfexzz><Dx\ gft 
&frb<Dn&mmcfczx. mmm^^x^nm-t^ 

^(d, ¥3C&m*mCXfroXh. m| |Ra£7)l 
14, ills <^£#l^ 9 , $SH#I4. Multiple 
Transmission Attack £riil#}~C# 

[0 0 6 1 ] £fc, ilff?S(7)^D"p^{g^fctolC, £c 

^t'feotk ±gEil3«tcUT, TE^^i:^^ 

2. mm 

mfmrnisxT^KDmrniz^^x, mi-tz* 
[0062] 2. i mmm<o&&m 

flff^iift^^Aijcfci^x. WHHtm^iasi 0 2 

i,^^ \sy*mmy.nz> v>'*tfin&&j&-rz> t it 

fc M\, WW^l 0 2^t5moit?«IJ, 
ffl v ^ 6 WcS^ 5 flff /jj 5 1> <o Xfotiti , if <7? «t 9 /jifflf 

[0 0 6 3] ^^A^^>-^#i±, #*Dfi?«5b«fflSl 

14, fl. 0. 

$tmfimx$>*>, mmztiz&m* l^w^ns 

[0 0 6 4] 2. 2 jfe^WIBF (m. Ra) »ttl^ 

9t-^iiff^^xAliC^V^, ffif«f+»0SB 1 0 3 14. ¥ 
tmtmPMRa^^lt, £^tfmF (m, R 
a) =m| I Ra&ntitfrZt UT^5^ ^m^i£ 

[oo65] fitiiE^ta^^^T, zw&io&m&m 
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(i) ^ai^&i 

*§£iW$8F (nu Ra) =m | | R a 
<5„ ) 

fc*5. fe&flHRF (m, Ra) =Ra | | m<b Ltt ct 
V\ 

[0 0 6 6] Sfc, 3pim«:4 \?v hi* o<oH$dS<7>SlS 

[0 0 6 7] (2) Sffi*fe2 
*££^«F (m, Ra) =m (+) Ra 

r-x% r (+) j tfetetttt&fn^i^ m 

I^m' =jg£iff*8F ( + ) Ra 

(3) ©W*fe3 

*#£ffi$BF (m, Ra) = m+Ra 

[00 6 8] m^Xm' =&&mmF— R a 

(4) ©tfcS^4 

J^ttfBF (rru Ra) =mXR a mod p 

[0 0 6 9] 

m^m* =*££^$BF/Ra mod p 

(5) gffi;frfc5 

£a nHW^BF (m, Ra) =BitPerra [Ra] (m) 
^rT% BitPerra [R a ] (m) 11. RalCidV^t, 

[00 7 0] Mrft&Jia*. &T<D£ 9 

(5—D arnxms— i 

m£. Rat'i/h/tU ho— -r— h£-t*:5o 
(0<J) d&HtfG0m= TiiiiOOOOllllOOO 
Oj ££U Ra = 3 (10ii»^m) t-fZk. 
t£cOm = TiOOOOllllOOOOlllJ tta 
6o 

[00 7 1 ] • ig^ftcotV ha-r- V t L"C 

i£coS5|m, ftcoiit>-C£>£ 0 fe-^wa 

(5 — 2) ^m^&5 — 2 

Ra^A^fiS<ti"6^$:b, -t<Z>SI»fe*lcS<5 



[0 0 7 2] (#J) Ra^l28t's/hftt5o Ra 

UX-Mcj:9e$fc-r3. fv^x.5i:, R a £A*)fiI<b 

[0 0 7 3] W) Ra^l2 8t'i/hSi:t5 0 Ra 
iC'^yVAHgfc&lfeLT* 1 6 t'y hf^s/^aliS: 

yVaflKl^ Sfc^aFfci&friSjKKV hn-f- h 

(5 — 3) ^ffi^gfeS — 3 
m£4 hfolCE^ot»^M?:Mt 
6 0 JSkIC, Ra(C*f^-r5Atb^4fc*2/ 

[0074] ettT 1 — ?vm±, 4 tr * h<7>3Cift 

&&m&* i em^a $>6ft (0»Jx.tf, r i j ) cor 

y hWtt, rooooj. roooij, rooi 
oj „ • • ■ „ ri i i oj &t>* ri i i i j t*£>6o 
ztihizttfc-tz i sm<D%m'&¥y hm-x. r 1 1 1 
riiioj , riioij, • • • , ro oo 
i j rooooj "CfcS. 

[0 0 7 5] l£tz % m<Dm Mz-lts r 2j ) COR atC 

i 6fl0>KiM*b'7 h^Jti, riii 
u, riiioj, rnou , • • •, rooo 

0J RXfi TOOO lj -Cfe*. rcOj:9{-. RaCOfttC 

co^ii, &<Oi§ £ 0 
[0 0 7 6] ^fiF^4t'7 hfolCE^Jotli 

(6) ^m^r&e 

^tf^F (m. Ra) =Tab [Ra] (m) 

Tab [Ra] (m) 11. mS:fjftf-^/UT 
a b (Ct£o TSEIft-T ^) ^ t ^^-Tc 

[OO7 7]0ijxl^ m^8t'y hfW^, Ra^I 
fe(C, 0»Jxll, Hi:^t«t 9 /jJ^^T-^T a b£ 
iSt^UTfct. ^f-^Ta bC'^t, m(Oi®:^ 
^-T6o ^^-y/t-T a bll, 8 h^ili 8 t* 
HcOfi§:^^^Jtyci#fl^2 5 6f@^tP 0 W^li. m = 

l (om^-. MllC/Tf^r-^H a bicS^^T, 

[0 0 7 8] ^fc, m<nmm*. ^iio-cfoSo 
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2. 3 mmn^^-r^tc^<o^m\tiy^^<r> 
mm 

[00 7 9] (1) 11 ^ff^J 
^-^iiff v-^^A l (Dm 1 <^7fc#J<i: UT<D^iimv- 

i b icov^o&^-rso 
(Bt-^iiff ^tai b(Dmi&) Bt-^im^xAi b 

[oo8o] &iwmmi obRrj^mmm2 0bn, * 
ti^fr. ^-mm-y^TJ* i zmrfL-tzmn mm i o& 
rj^mmm2ot, mm(om^^\^x^^ 0 j^t^ 
i^-c mmmmi o&u^m^2 o tcom^^^ 
ttTMt^o miammi obn. $h\^ mm^i 

0 7^r^^TV>5 o i^f^lObli. W^i 

£f&£!5 1 0 2 {Cft;iT, 10 2b 

Tl/^o ^:{f£!^2 0 b!3, £<biC, «2 0 

8SW«i^9l2 0 9 £{l;iT^<5 0 ^$15 1 0 
7£l*]#lgfl2 0 8<tte, fM4 0b^lt»$ 

[0081] mm^i 0 713, attXRSr^U £j£ 
L/-c£L^:XR^^ffl{H]^4 0 b£fr LTH]Jfflffl5 2 0 8 — 

o 2— m^-r^o f+*DW«^c6m 0211 ^gpi 0 

7*^a«:XR«:SitlR9, SitlRofcfl*XR*fflv^ 

ttM#$&R a S:Mt6-0iJi UT, WPtt^^ 1 
0 213, a^XR5rt^*{«SR a ti-^>o 
[0 0 8 2] |5]#te&2 0 8te, Wi4 0b^L 

r, moiffaxRtsitift^ s«t«iofc^DttiaxR 

0 913, P^g|S2 0 8^aitXR^«!3, gtffc 
ofc&J&XRSrffi^T, WiRa^U ±ricL 
fcttMMlR a &tftmk£;& 2 0 3 ^ffl^rT*. C C 

x\ &&xR&m\t*xmmnRa&£j&-tz>-- mt\, 

"C f+»Dffif»±J*S|5 2 0 9 f3, aftXR^©**mD 
tiSfftRa <t-T6o 

[0 0 8 3] (Bff#iiff v 1 A 1 b *>8&f10 Pt-^iifS 
b<£>SWl-Ol>T, l9.(:W7D-f f- 

h£ffl^Ttfc9H--5 0 ftis, f^-iiff^^ l b o®j 

fm, ^mmis*TJ*i<nmfttmmx'&>z><DX\ z 

[0 0 8 4] mm&l 0 713, &&XR££/&L U^r 
^S2 0 1) , toKUfca»XR«:l¥ffl[H]j»4 0 b£ 

^urf^^2 o 8— aurfs Uf y/S2 0 2) e 

Sfc, ^fiJttfc§L*XR«:f=t»DW«^K8Ul 0 2-m^ 



i^yZfS 2 0 3) Q f*anffi«£/8g!5 1 0 213, 
|5j#JS5l 0 7^ibSUfrXR£gltEl»9, £l3&otf:SL& 
XR»^t, WiRaSrMU ^UfcttflDW 
«Ra£ffl$Rf*flnasi 0 3— ffi^-r^) Ur^S2 0 
3) . 

[0 0 8 5] (W}^2 0 813, «BIh]^4 Ob^l 
T, Sl&XR&gttft!), g^ofcft3&XR£ttOTr 
#MgB2 0 9-.ffi^ (^f^7 s S2 02) . ttJjD 

ffif«^ax2 0 9ii, i^j«ai2 0 8*»e>a«[XRS:»t 

©•3, *tlftoft:a»[XR^fflV^T, WliRaH 
J&L Ufy/S2 0 4) , MUWiRa^l 
«^2 0 3^t6 (^fy/S 2 0 5) o iW^ 
8fe*SfR2 0 3tt, ^P<f«Ra SrS»1-«t9 W^/S 
2 0 5) , $ltBofcmill9«Ra4:ffl^T, 
it^bm^m' ^MtS Uf^S 2 0 6) 0 
[00 8 6] ( 2 ) 2 (D^Mm 

^rAi c (Co^Tltt^-rSo 
(Bf#iift ^ 1 c Offifife) Sf^ilff 1 c 

13, ID 1 0 {C7F-TJ:3ic, il^H^Ml 0 cS^ifif 
2 0 cd»b«fife$tbS. 

[0 0 8 7] ^fitlOc^lfM2 0cil -fc 
Bt-^iifi^^A 1 «rWfiJt-T6i3HSISia 1 0& 

1 0 c 13, ffitafflfRfeliJcSlS 1 0 2RxmiE & I 0 6 

xlt, ^nma^as 102c &tft£ft stj io6c?r(i 

gm§£©2 0cl3, t«*^2 0 3 
&l«mS5 2 0 1 (Cft^T, tH^«35 2 0 3 c&tfg 
ftfflJ2 0 1 c$r(gxT^6o 
[00 8 8] *ttHUffR£fi£S5 102c, i£ff S5 1 0 6 
c m^*^2 0 3 c&tfgfMJ2 0 l c!3, 

*LfHip«*feriEftj 10 2, agmsu 106, t-3iai&*gjs 2 
o 3&t««sB5 2 o i kmm<Dffij&&mi,x\,^ 0 

102clt &SUtf««R a ^r^ff 155 10 6c — 

[0089] iHif sb i o 6 c i*, ttaQra$a±/&as 1 0 2 

c a»lbtt*Dra«R a . *l«ofcfM»«*R 

aH^-^7h30^lt, §OT2 0c^ 

ft i~6o ^mmi2 o i c i3, ^m^© 1 o c ^e>-f >^ 

-*yh3 0<r#Lt, f+ADit^R a ^Sff U, £ffL 
fcM»Dfi¥«R a ^m^*S5 2 0 3 c-ffi^-f So 

[0090] tf?^5fegiS 2 0 3 c 13, gfff 201^b 
i«iR a «rSi^!5 , S»t«tofcf+*DW*R a $rffl 

(^-iimv^xA i c cowjUf) pf-§sim i/^^ ^ i c 

[009 1] Pf-^iff is*T A 1 c <7)S)5lf^l3, Bf 

^m"s*7'^\<nm j Ekw\$kX'&>z>(DX\ z.^xan 
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*jM:«m>* Ltttw-ra. ttwm&mi o 2 c 

ft & 1 0 6 c 0*x ^S221) . & 

io6di mmm&8& 102c m^mmmR a 

2 22) 0 

[0 0 9 2] g{f$B2 0 1 cM\ a£ff ^{3 1 0 c a»<b-f 

»UfcfWD**R a Srm^*SP2 0 3 c ^ffl^-Ta 
(^fy^S 2 2 2). ffimfe2?gB2 0 3 cll gmaS 
2 0 1^bf«iRa^lt^ l 5 (^T5/yS2 2 
3) , S^ofcfflW«Ra«:ffll^, m^-a-it® 

[0093] o) m3<D&mm 

^y-^ 1 d iCot^lftWa, 
(Bf-^ilff v-^-T A 1 d<Dtf§/&) Bf^Tifi^^A 1 d 

fi, 11} i 2 (c^j- £9ic, infill o d &t«{f 

2 0 d^lbM^H^ 

[0094] &m mm i o d&t/gm^@ 20dii -t 
*ve*k Bf-^@mv^xAi^fifei-6i§ft^i os: 

1 0 d «i, f+»DWa±fiJcSU 10 2, Bf^keU 1 0 5 

i2KS 2fl 1 0 6 {CftxT, ^*iHwa^feas 1 0 2 d . 

<mi o 5 dRvmmm o 6 d£H$;i-c^5 0 

gfi £gfg 2 0 d 13, tfi-^fbSB 2 0 2, ti$8l&*2fl 203 
2fclfgffgB2 0 1 (C{t;tT, &-fHtSB2 0 2 d, ItMft 
*SR2 0 3 dRXJ^mnzO 1 d^^TV^^o 
[0 0 9 5] ttJjDffir«£/5fcg|S 1 0 2 d , Bf 1 0 5 

d % jgmm io6d, m*?<t& 2 0 2 d , mn^^2 
0 3 d&r««»2 0 1 dia, tnfnwMM^ 

102. Bt -§-{b:^ 105, i£{f g|5 106, ft-JHfclTC 2 0 
2, 1f$l!$5&$iS2 0 3&Xf&m&2 0 1 ilSI«<7>«^S: 

[0096] mnwr^^ep l 0 2 d 12, ttflHMIR a 

&±fSL U £f£ LfcttflOti?«R a *Bf^b«B 105d- 
ffi^7i-6 0 Bt-^tSB 1 0 5 d 11, ttJraffl«±J*SB 1 0 2 

ai:^r^^yxi,^uT, f^ritmmmE (R 

a, Kp, r2) ££/&-r6 0 ^ ^T*, r 2 12, r <b fBI 
mnn&CX'hZ, ^LfcBf^LttMft$aE (R 

a, Kp, t 2) &mm&\ 0 6 d^aj^li-60 
[0 0 9 7] SB 1 0 6 d fi, Bff^fkSC lOSd^b 
Bt-^ftmntimE (Ra, Kp, r2) g 
Itlko&Rt^HkmilffittE (Ra, Kp, r 2) V 
^-^i/h3 0^tt, ^I2 0d^lf6c 
SrffgB2 0 1 dte, £{f=£©2 Od^^y^y h 

3 0^Ut, BM4fcttaoffi«E (Ra, Kp, r2) 



££«U £{SL^^fcttM»t&E (Ra, Kp, r 
2) £&^fc£&2 0 2 d^fci^-fSo 
[0 0 9 8] ®-*Hfcgi52 0 2 dte, £{fgJJ2 0 1 d frh 

ntwmtmnv (Ra, k p , r2) ^rms, s 

»t«tofcB|f-§-{bf^APlt«E (Ra, Kp, r 2) iC*g-^ 
T^rfUXA^UT, m*HVNtfmD (E (Ra, K 
p, t2) , Ks) ^Mt^o ^IC, £/£Uh«-f§*t 
Mff#D (E (Ra, Kp, r2) , Ks) £1ffBI$£ 
SU2 0 3 d^a^i--5 0 

[0 0 9 9] ti?$g(&*£&2 0 3 dht, ^{t^2 0 2 d 
fr<bmW*11QtimD (E (Ra, Kp, r 2) , Ks) 

g»t»ofc«^f+*D««D (E (Ra, K 
p, r2) , Ks) £ffl^T, ffi^iSftD (E (F 

(m, Ra) , Kp, r) , Ks) frb'&ttm' Z± 

(Bt-^iimvx^A 1 dcomm m^min 1 d 

[oioo] fc*5, Bf-^iifiv'^7 1 A 1 d <Dmm*. Bt 

m&z*<cst Lxnm-rz> 0 tfmmm±timi 0 2 d 

^ftSBl 0 5 d^ffi^/i-5 (^x^/^S 2 4 1). «H§- 
itU 1 0 5 d 12, tt;&Dffi$R±J5!» 1 0 2 d rt^ttMm 

HXASrJfiLt, Bf^bttMSffRE (Ra, Kp, r 
2) ££fifcU ^Lfclfc^fcf+flDtimE (Ra, K 
p, r 2) Zmia&l 0 6 d^thJj-tZ Ufi//S2 
4 2) o 

[0101] j^m 95 1 0 6 d (1, Bf^kSP 105d^f> 
Bt^fb^Dif^E (Ra, Kp, r2) Sr^it^O, S 
ftSlofcBf^k^DlW^E (Ra, Kp, r 2) £^ V 

^— *y h 3o^u, §:m^fa 2 o d-^fa-ra 

(^ry/S 2 4 3) o Sm§l52 0 1 dii, S:fa^fS 2 

od^y^^3o^it, nt^w^affira 

E (Ra, Kp, r 2) Sr^ffU Sit Lfc«HHfcMfln 
m»E (Ra, Kp, r 2) SrlffLSU2 0 2 d^ 
(^fj'/S 2 4 3) 0 

[0102] fg-fHfcSB 2 0 2 d IS, gffgft 201d^lb 
Bf^^Plf^E (Ra, Kp, r2) Sr^tffiH?, S 
Jt«t-3^Bf^k#»PW«E (Ra, Kp, r 2) (CH^- 
T/t-^y XASrSSLT, fft#N«DWffD (E (R a , K 
P, r2) , Ks) ££/&U ±fij£Lfctft^t*DW«D 

(E (Ra, Kp, r2) , Ks) ?:»4^2 0 3 
d^tti^-f6 (^^^5 244) 0 

[0103] M^20 3 d 11, '&-%ik&2 0 2 d 
frb'&tHtMmmD (E (Ra, Kp, r 2) , Ks) 
fcgrm 1 ? Uf^S 24 5) , SJtflStofcffi^/lD 
t??^D (E (Ra, Kp, r 2) , Ks) fclfj^T, 
#^^tj9#D (E (F (m, Ra) , Kp, r) , K 
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2. 4 ^#Jco3im^&*a£-ti: 
^DiW^CO^^J. Jg£fS$SF (m. Ra) m«?>»2 

nm^fctoffi^ico^T, mi 4(c^-r^^ 
[oio4] ^(Dm^-rx o ic, {^niw^^^^j 

(£L&. ^-fA^^yyTO-)^) 14, ^^W^F 

(m, Ra) wmnrnm, Rvwwmmz&^'tztz 

a) %^(Dmm<Db^. m | | R a ^££^^$8(7) 

[0 10 5] zco^tc^-rj: 3^ ^if$gF 

(m, Ra) M&(Dmm(0?1b. m (+) Ra. m + 
Ra, mXRa mod p, BitPerra [Ra] 
(m) . Tab [Ra] (m) lc£ Z>'&^ m<D&ii& 

&fi, ^iiffv-^^-Ai b — i dtc^-c, mm^sm 

6o 

[0106] ( 1 ) 9t-^iiff "y^T- A l 14, <fc 9 Id 
ffij&l.Xh£<<\ 

&mmm i o o-^p^i^^ io4ii mnmim i 

0 3t5^^^F (m, Ra) £rgtfl&«9, glt&o 
«£3^$8F (m. Ra) [C^ y V^&SrJS LT, ^ 
S&Mh (F (m, Ra) ) ££/&U LTcflgmfit h 

(FkRa)) SriUffSPl 0 6, -f^-*y h 3 
0, £ffgfS2 0 1 ^IT 4 Jfc«8&2 0 5—i^fi-5o 

[0107] &mmW 2 0 CD-^f6]^^ 2 0 

4i4, M«2 0 2^bl^MD (E (F 

kRa),Kp, r),Ks) Sttlfc 
otf^iliD (E (F k Ra) , Kp, 
r),Ks) IC'n* LT, gi^cfiSh (D 

(E (F kRa),Kp, r),Ks)) 
Ls $X&\*1tmkmh (D (E (F (m, Ra) , K 
P, r),Ks)) &lt*fc»2 0 5^tttfr*-6. JttfcBR 
2 0 5I4, Bigcifch (F (m. Ra) ) <t. BS^fiSh 

(D (E (F (m, Ra) , Kp. r) , Ks) ) SrJt 

[0 10 8] CCQ^IcLT. ¥^jEU<tg-^T*#fc 

(2) Bf*§-i§fl ->*^A l toJ; 9(ctMcLT<bJ: 

j£ff 2£© l 0 ©waf^JflSIS l 0 3 14. £ blc, F £ I4£& 
*S^i££&-Cfc5G£fflt*-C\ ^SiG (m, R 



a) Z±i£-tZ> 0 ZZX. GOMrftmits G = R a | | 
mT*£>6 0 ifclC, m^tt^l 0 314. £f&L*:*££^ 
*gG (rru Ra) ^-^Ml0 4^f5 o 

~*$tim&& io4ii timttanSB 1 o 3 

UG (m, Ra) gtt&ofc*££Hft$gG 
(m, Ra) lC/NyV~M»&tteLT, B8£fcMh (G 
(rru Ra) ) ^rMU ^L/cBiifcfih (G (m, 
Ra) ) ^1^10 6, >|y^-^yF3 0, gffgfl 
20 1^U, ltg?^2 0 5~^f-f6o 
[0 10 9] £ft3£e2 0<Bffi#|fc*Si2 0 3 

(4, ^Lfctg^m' atl^RaCGSrffl 

V>T. tlMIRG (m' . Ra) fc£fifcLt\ 

M2 0 4-ffiW5 o ::t?, «^2 0 3 
14. ±^3E^ji^i-±p^ur, i2Hf£l®i 0 £<o 

ra-CR CSUSfcR a $:Mt^c -^FfrttBil&Sfl 2 0 4 
14, ^mnG (m' . Ra) gtfl&o*: 
JE^HfffRG On' , Ra) y VaBB*«rlfiUT, BG 
Mth (G (m\Ra)) *r£j3&U £fifcLfcB8#fiI 
h (G (m' , Ra) ) £Jfc$fcg|S2 0 5 ^ttJ^-fSo it 
^2 0 5il iMh (G (m, Ra) ) £BI»fi£h 
(G (m\Ra)) i:^tt:g?LT, -SrTS*^*^ 

[oiio] roj:9(-uT, ^^iEu<^-ety u c 

(3) Pt^-r/w^yx^s^-^r/u^yxAii, ±ie 

WBt-^T/U=fyX^^rigffltTt <tl^o 0>Jx.(i, DES 
B&^S:. R S ABff#*^E 1 G a m a 1 Bf^^/j: 

[0111] — #ifirt4i»#si$ i o 4(4, x^v^ 

*(filTO5:ffl^tt)J:^ B DESPf**a, R 

S Attest, ^t^E 1 G a m a 1 SffMl^OV^ 

{4. n«ii» t uj*w». , «>y-x/ra 

^H^, 1 9 9 7{Cg¥L<^fbtLT 

[0112] $^(c, i/*TJ*nm%±frx— ^rsittii 

(4) *n«a<o^-c«, i£ft3£iai ot^mmm.2o 

tte. 4 h 3 O^^UT^^tLT^ai: L 

[0 113] (5) #*IEI4, ±fSl^-r^&T*^6^ 
^mi" -6 => v fa - * X a ^ 7 ^ T* ^> 6 <h U T h X v > 
X3bZ>t^Xh£i<\ */c, *55Mtt, fiuiE=ive^- 
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